Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/323830333a366661303a3a2f33322d3438203d3e20323637373930.roa
File:                     323830333a366661303a3a2f33322d3438203d3e20323637373930.roa (raw, json)
Hash identifier:          0FvxJcX735G+3QS4koB01SdY+hLeWeiysBwK5vZ2ntA=
Subject key identifier:   E8:17:04:BF:75:81:50:34:47:92:EB:08:28:10:64:2C:00:1B:2B:C0
Certificate issuer:       /CN=DE8F7D598DEA40606B39C7B21C22841226056748
Certificate serial:       663B57B7DF62E600C91E3882C4FC3DCCAD6F7568
Authority key identifier: DE:8F:7D:59:8D:EA:40:60:6B:39:C7:B2:1C:22:84:12:26:05:67:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/323830333a366661303a3a2f33322d3438203d3e20323637373930.roa
Signing time:             Tue 05 Mar 2024 18:12:50 +0000
ROA not before:           Tue 05 Mar 2024 18:07:50 +0000
ROA not after:            Tue 04 Mar 2025 18:12:50 +0000
asID:                     267790
IP address blocks:        2803:6fa0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3b:57:b7:df:62:e6:00:c9:1e:38:82:c4:fc:3d:cc:ad:6f:75:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8F7D598DEA40606B39C7B21C22841226056748
        Validity
            Not Before: Mar  5 18:07:50 2024 GMT
            Not After : Mar  4 18:12:50 2025 GMT
        Subject: CN=E81704BF758150344792EB082810642C001B2BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:19:c4:06:76:d2:17:97:c7:82:8e:a2:21:
                    57:51:61:94:9b:4a:a0:44:a8:63:86:47:17:23:67:
                    22:f9:20:6f:50:92:9e:d8:44:af:87:11:3c:d8:9b:
                    da:6c:4b:e6:4c:f1:6d:74:83:a9:33:45:d9:59:ee:
                    e7:73:d0:57:62:44:55:1c:ec:71:83:78:bd:c8:f8:
                    42:ac:66:bb:7a:aa:bb:16:0a:af:4d:cf:0d:6a:d1:
                    1e:c5:df:dc:2d:10:63:19:f6:c8:56:5a:a4:a7:f6:
                    cb:6e:9b:fc:4d:92:79:39:d1:a4:f4:3e:da:a0:76:
                    24:6c:ac:38:80:ab:b9:71:a1:19:5a:ca:44:60:92:
                    85:a8:3f:10:6e:4a:b0:cd:0c:f9:e2:e2:d6:7d:cf:
                    02:cb:3a:15:0a:d5:fb:06:14:fe:d8:e9:33:42:26:
                    e9:ac:0e:72:28:b4:b3:25:3a:95:0b:aa:7a:3f:c5:
                    80:77:ac:c5:ef:7f:f3:79:ce:15:fd:26:07:75:fe:
                    74:9e:44:9a:5e:8b:54:c9:61:65:0b:0d:b3:e9:1f:
                    b7:f2:92:d4:06:ad:ee:02:8c:ee:87:a5:7d:f2:ef:
                    dc:b4:fa:e8:c6:41:27:cd:3e:b4:35:ea:65:66:bf:
                    bc:8a:c0:c2:55:3f:a9:c8:96:98:59:5a:b0:e5:29:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:04:BF:75:81:50:34:47:92:EB:08:28:10:64:2C:00:1B:2B:C0
            X509v3 Authority Key Identifier:
                keyid:DE:8F:7D:59:8D:EA:40:60:6B:39:C7:B2:1C:22:84:12:26:05:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/DE8F7D598DEA40606B39C7B21C22841226056748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/323830333a366661303a3a2f33322d3438203d3e20323637373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:ef:e5:28:d7:56:1d:a7:6b:02:01:7c:0e:0c:a7:80:be:4f:
         42:64:8c:2d:07:ca:10:4e:e5:5c:6f:a9:12:89:5c:be:5d:cb:
         49:31:4c:25:3f:1b:f3:7a:5b:51:0e:1a:60:56:ab:05:2c:d4:
         88:9f:f6:82:ca:30:ad:a3:78:dc:35:83:7b:04:84:11:47:85:
         7b:38:46:bd:7f:0b:f0:7b:bb:a2:a0:df:e6:c1:49:b5:c8:26:
         a2:96:65:aa:2f:96:32:bc:94:0c:50:1f:21:a5:6c:d6:74:83:
         3d:26:7c:21:ab:96:70:6e:e6:b0:c4:59:7a:29:42:83:74:7a:
         4f:bb:d8:14:66:0a:e7:74:ea:3f:f3:09:3e:10:92:dd:cc:2f:
         4f:59:ae:be:61:28:24:10:82:24:56:8a:fe:39:87:ad:14:67:
         91:4d:d1:70:4b:43:7a:52:fd:6d:b4:75:4d:6c:7d:2d:36:8c:
         81:90:18:dc:b9:53:89:fa:a3:00:71:df:e0:27:7e:fc:e9:5c:
         d8:96:f8:49:11:62:ae:84:28:07:bc:0f:06:55:04:10:03:b1:
         d7:e0:1d:df:1a:16:12:02:8d:e1:7c:84:ac:24:36:34:13:88:
         6a:56:c3:02:26:1b:31:38:a5:c4:7d:7d:ee:76:14:28:76:2f:
         a5:79:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----